I think you got that backwards.
apple is blocking exec flag on mmap'ed blocks because of security concerns.
Malware _relies_ on that ability to avoid static analysis.
apple is blocking exec flag on mmap'ed blocks because of security concerns.
Malware _relies_ on that ability to avoid static analysis.
The block on allocating executing memory flows from the security concern, rather than security “spin” flowing from the allocation restriction.